MiPreventControlAreaDelete

UINT64 __fastcall MiPreventControlAreaDelete(__int64 a1){
  _InterlockedIncrement64((volatile signed __int64 *)(a1 + 112));
  *(_QWORD *)(*(_QWORD *)(qword_140C4E388 + 8i64 * (*(_WORD *)(a1 + 60) & 0x3FF)) + 1688i64) = a1;
  return ObFastReferenceObjectLocked((_EX_FAST_REF *)(a1 + 64));
}

Referenced by:

MiDeleteCachedSubsection
MiFlushControlArea